
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft
File: 5xSoFJfIF3hoy7TNszjD72zp6VM.mft (raw, json)
Hash identifier: tyo+Nq7DYdkyJ0R2rp5Q5BhfLOwxNgaYS/pa3WmE0bw=
Subject key identifier: 3F:45:25:3B:D7:B0:A7:0E:CC:67:DA:23:85:6E:25:B3:53:D7:3D:AF
Authority key identifier: E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53
Certificate issuer: /CN=A9172C8D/serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953
Certificate serial: 0B2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft
Manifest number: 0B1B
Signing time: Wed 22 Jul 2026 19:40:36 +0000
Manifest this update: Wed 22 Jul 2026 19:40:36 +0000
Manifest next update: Wed 29 Jul 2026 19:40:36 +0000
Files and hashes: 1: 5xSoFJfIF3hoy7TNszjD72zp6VM.crl (hash: L6QrJ67DrRGjwFHfeh0mlFXYKENePn8OE4YOnfFB5mk=)
2: CDD96B60B78911EF9BD3EF80C4F9AE02.roa (hash: +vuV01yjXB1+RoW7WbOmTfoAon5Ua6XhR4wfKoKtImw=)
3: 9085F6C0B78911EFB9994180C4F9AE02.roa (hash: u8WkqF58twBf7V4x+gVZYpgUq+L7j/Jz1XNkEqJ+tfM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl
rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:40:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2858 (0xb2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172C8D, serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953
Validity
Not Before: Jul 22 19:40:36 2026 GMT
Not After : Jul 29 19:40:36 2026 GMT
Subject: CN=6a611cb4-743f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6e:4b:e8:22:2d:a5:72:61:80:0f:55:41:22:
7f:18:db:21:76:30:81:33:66:de:36:c9:03:83:92:
ec:ab:65:4c:05:69:db:3b:79:09:2e:b7:f2:93:6d:
fa:46:e6:e9:b7:a3:c6:df:78:23:81:ed:9d:ce:a8:
7a:35:7c:00:4f:e7:21:24:a2:ce:da:56:a6:78:60:
b5:77:11:f7:16:4d:5c:71:66:7c:a2:28:81:c6:9d:
f1:73:ea:df:a6:75:64:91:61:12:2f:ed:2f:01:68:
28:5a:a6:de:c3:09:b0:25:23:8a:5d:6a:a9:1c:d0:
db:f8:55:6b:e9:5e:59:78:7b:76:13:ee:1e:14:8b:
8c:93:70:f5:83:55:49:b8:5f:ed:fa:bc:d4:25:b6:
ac:c7:80:b4:27:cb:4d:94:6e:29:d2:26:0a:0a:ab:
1c:e7:6f:cd:d7:48:c5:05:50:4f:90:13:84:37:10:
e5:02:59:7a:ac:34:60:1e:e2:54:56:81:4e:4f:1f:
b5:13:66:71:2d:61:f7:a4:12:77:69:f7:40:ff:00:
e1:9c:91:49:60:ac:c9:c0:17:2f:f0:dd:3b:1f:51:
9c:42:20:79:6f:fb:92:2c:8c:ce:3a:4b:d2:24:0c:
05:f5:e4:6c:bd:0d:04:aa:c2:20:4e:5d:1e:8a:78:
58:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:45:25:3B:D7:B0:A7:0E:CC:67:DA:23:85:6E:25:B3:53:D7:3D:AF
X509v3 Authority Key Identifier:
keyid:E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:9c:bb:30:fc:7c:60:5f:38:5a:b5:b4:66:40:d8:c9:78:11:
c9:97:1c:3d:c0:bc:89:4b:3e:d2:81:6c:bb:62:e0:91:f4:90:
77:88:e7:f9:ca:30:10:f9:34:c6:77:09:64:a1:eb:fb:51:f9:
cc:d2:b3:52:58:59:84:f9:df:64:26:fc:34:64:0c:1f:c0:67:
95:80:f2:5d:da:87:e1:87:11:67:42:cc:f6:41:48:e8:2f:0d:
8a:59:5a:68:42:f5:99:7e:59:0a:65:a9:2f:0c:4d:19:ff:3c:
d0:83:c0:00:95:96:d6:ab:6e:db:6e:f1:b4:59:1f:0b:ab:02:
36:9f:af:eb:67:d0:87:28:ff:72:fc:db:e4:1b:60:89:35:87:
ad:57:46:8a:64:8b:8e:bc:87:3c:77:f8:2c:ba:60:cd:bb:19:
0f:6c:17:c7:2f:c6:ee:30:02:3e:ed:83:b8:81:f3:5f:74:7f:
bb:a7:ec:05:ec:02:4d:33:03:88:93:9b:dc:9c:b5:e0:ea:e0:
dd:b0:0d:7c:13:05:60:55:55:eb:14:5b:4f:64:a7:3b:7e:73:
b1:ce:3a:51:f5:f4:29:9a:05:65:6e:b8:8e:d5:e7:f5:05:b6:
eb:64:af:f7:4b:a5:3e:91:9a:0d:5a:f9:60:de:be:f3:0c:5e:
4d:07:0d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:30:46 2026 by rpki-client